A firmware vulnerability in Coldcard hardware wallets was exploited, leading to the theft of about 2,100 BTC, with losses nearing $130 million. In the days around the incident, on-chain data showed that long-term holder wallets moved roughly 233,000 BTC, worth about $15 billion. Nick Neuman, chief executive of nCasa, said some of those transfers came from Coldcard users shifting funds into multisignature wallets, while some Ledger and Trezor users took similar action after the incident. Over the same period, about 22,000 BTC moved onto exchanges. Coinkite has asked users who generated seed phrases with firmware versions 4.0.1 through 4.1.9 to treat those wallets as compromised and move to new seed phrases immediately. Those affected firmware versions span from March 2021 to July 2026. Decrypt was cited as the source of the report.
Odaily reported that a firmware vulnerability in Coldcard hardware wallets was exploited, resulting in the theft of about 2,100 BTC, with losses close to $130 million.
On-chain data showed that, in the days around the incident, long-term holder wallets moved about 233,000 BTC, valued at roughly $15 billion. During the same period, around 22,000 BTC flowed onto exchanges.
Funds shifted after the incident
Nick Neuman, chief executive of nCasa, said part of the transferred funds came from Coldcard users moving assets into multisignature wallets. He added that some Ledger and Trezor users took the same step after the incident.
Affected firmware versions
Coinkite has asked users who generated seed phrases using firmware versions 4.0.1 to 4.1.9 to treat those wallets as compromised and immediately migrate to new seed phrases. Those firmware versions cover the period from March 2021 to July 2026.
The report cited Decrypt.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
